]> git.ipfire.org Git - thirdparty/glibc.git/commit
CVE-2016-10739: getaddrinfo: Fully parse IPv4 address strings [BZ #20018]
authorFlorian Weimer <fweimer@redhat.com>
Mon, 21 Jan 2019 20:26:03 +0000 (21:26 +0100)
committerPranav Kant <prka@google.com>
Fri, 12 Jan 2024 23:19:48 +0000 (23:19 +0000)
commit66bec53f073ca8ef6ac138dfe22ae9af7ce1d9db
treef8c72a31beaa43b4b06c86f2e3a473a7388a5ec4
parent2b1ebe408afc572f61de4622739f7dae279e442d
CVE-2016-10739: getaddrinfo: Fully parse IPv4 address strings [BZ #20018]

Some tests in original commit are not included because they depend on headers that
are not present in GRTEv5 branch.

The IPv4 address parser in the getaddrinfo function is changed so that
it does not ignore trailing whitespace and all characters after it.
For backwards compatibility, the getaddrinfo function still recognizes
legacy name syntax, such as 192.000.002.010 interpreted as 192.0.2.8
(octal).

This commit does not change the behavior of inet_addr and inet_aton.
gethostbyname already had additional sanity checks (but is switched
over to the new __inet_aton_exact function for completeness as well).

To avoid sending the problematic query names over DNS, commit
6ca53a2453598804a2559a548a08424fca96434a ("resolv: Do not send queries
for non-host-names in nss_dns [BZ #24112]") is needed.
12 files changed:
ChangeLog
NEWS
include/arpa/inet.h
nscd/gai.c
nscd/gethstbynm3_r.c
nss/digits_dots.c
resolv/Versions
resolv/inet_addr.c
resolv/res_init.c
resolv/tst-aton.c
resolv/tst-inet_aton_exact.c [new file with mode: 0644]
sysdeps/posix/getaddrinfo.c